The European Securities and Markets Authority (ESMA) has proposed new rules under the Markets in Crypto-Assets (MiCA) framework that would cover DeFi gateways, staking and lending, according to The Defiant.

The proposal marks the EU regulator's most direct effort yet to bring decentralized finance services within the perimeter of the bloc's crypto rulebook. ESMA, the Paris-based authority that supervises markets across the European Union, is targeting the access points where retail users enter decentralized protocols rather than the protocols themselves.

The scope of the proposal covers three distinct service categories: gateway providers that route users to decentralized applications, staking services, and crypto-asset lending. Together these form the largest untapped segments of the EU crypto market that MiCA's original text left largely unaddressed.

What does the proposal target?

The focus on "gateways" signals a functional approach to enforcement. Instead of attempting to regulate autonomous smart contracts, ESMA appears set to regulate the intermediaries — front-end interfaces, wallets with integrated swap functionality, and aggregators — that connect users to DeFi protocols.

Staking and lending bring their own supervisory questions. Staking services sit at the intersection of custody, operational risk and reward distribution, and EU national competent authorities have so far applied divergent interpretations to them. Lending platforms, meanwhile, raise consumer-protection concerns that MiCA's original authorization regime did not contemplate for decentralized models.

How does this extend MiCA?

MiCA, which entered into force in 2023 and became fully applicable for crypto-asset service providers in December 2024, established an authorization and passporting regime for centralized crypto businesses across the 27-member bloc. Decentralized services were largely outside its perimeter, a gap regulators on both sides of the Atlantic have flagged repeatedly.

An ESMA proposal covering DeFi gateways, staking and lending would close part of that gap by attaching obligations to entities that remain identifiable and jurisdictionally anchored, even where the underlying protocol is not. The practical consequence for operators is significant: platforms serving EU users may need to assess whether their activities constitute regulated crypto-asset services, regardless of where their smart contracts execute.

What happens next?

As a proposal, the rules are not yet final. ESMA's technical standards and guidance under MiCA typically pass through consultation with market participants and review by the European Commission and national authorities before taking effect. Firms offering staking, lending or DeFi access to European customers should monitor the consultation window, since early feedback often shapes which activities fall inside the authorized perimeter and which obligations — disclosure, capital, or conduct-of-business requirements — attach to them.

The proposal also lands amid parallel work in other jurisdictions, including the United States and the United Kingdom, where regulators are drafting their own frameworks for stablecoins and decentralized services. Divergent definitions of what constitutes a regulated intermediary could fragment compliance obligations for global platforms.

For DeFi operators, the message from ESMA is that the era of perimeter ambiguity in the EU is closing. Firms that built their models on the assumption that decentralized delivery places them outside MiCA will need to re-examine that position once the proposal moves toward final rules.